CVE-2015-8560
Fixed in a distro release EPSS 5%
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
Products: canonical ubuntu_linux, debian_linux, linuxfoundation cups-filters, linuxfoundation foomatic-filters
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups-filters | 1.4.0-1 |
| Debian 12 | foomatic-filters | 4.0.17-7 |
| Debian 13 | cups-filters | 1.4.0-1 |
| Debian 13 | foomatic-filters | 4.0.17-7 |
| Debian 14 | cups-filters | 1.4.0-1 |
| Debian 14 | foomatic-filters | 4.0.17-7 |
| Debian 6.0 | foomatic-filters | 4.0.5-6+squeeze2+deb6u12 |
| Debian 7 | foomatic-filters | 4.0.17-1+deb7u1 |
| Debian 8 | cups-filters | 1.0.61-5+deb8u3 |
| Debian 8 | foomatic-filters | 4.0.17-5+deb8u1 |
| Red Hat Enterprise Linux 6 | foomatic | 0:4.0.4-5.el6_7 |
| Red Hat Enterprise Linux 6 | foomatic-debuginfo | 0:4.0.4-5.el6_7 |
| SUSE Linux Enterprise Desktop 11 SP3 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server 11 SP3 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server 11 SP4 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | foomatic-filters | 3.0.2-269.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | foomatic-filters | 3.0.2-269.39.1 |
| Ubuntu 14.04 LTS | cups-filters | 1.0.52-0ubuntu1.7 |
| Ubuntu 14.04 LTS | foomatic-filters | 4.0.17-1+deb7u1ubuntu0.14.04.1 |
| openSUSE Tumbleweed | cups-filters | 1.8.2-1.11 |